:root{
  --bg:#f4f6f9;--card:#fff;--text:#1d2430;--muted:#6b7686;--line:#e2e6ec;--line2:#cfd5de;
  --brand:#c8102e;--brand2:#8f0b21;--side:#171b22;--side-text:#c9d0da;--side-active:#262c37;
  --ok:#1a8f4a;--ok-bg:#e6f6ec;--bad:#c62828;--bad-bg:#fdecea;--warn:#b26a00;--warn-bg:#fff4e0;--info-bg:#e8f0fb;
  --allow:#4c8dd6;--block:#c8102e;
  --s0:#c8102e;--s1:#4c8dd6;--s2:#f2a900;--s3:#1a8f4a;--s4:#8e5bd6;--s5:#e0642f;--s6:#2aa9a0;--s7:#8a8f98;
  --radius:8px;--font:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;
  --mono:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;
}
*{box-sizing:border-box}
html,body{margin:0;padding:0}
body{font:14px/1.45 var(--font);color:var(--text);background:var(--bg);display:flex;min-height:100vh}
a{color:#1f5fbf;text-decoration:none}a:hover{text-decoration:underline}
h1{font-size:22px;margin:0 0 4px;font-weight:650}h2{font-size:16px;margin:0 0 10px;font-weight:650}h3{font-size:14px;margin:14px 0 6px}
p{margin:0 0 10px}
code,pre,.mono{font-family:var(--mono);font-size:12.5px}
pre{background:#f0f2f5;border:1px solid var(--line);border-radius:6px;padding:10px 12px;overflow:auto;white-space:pre-wrap;word-break:break-all}
.muted{color:var(--muted)}.small{font-size:12px}.right{text-align:right}.nowrap{white-space:nowrap}.center{text-align:center}
.hidden{display:none!important}

/* sidebar */
.side{width:222px;flex:0 0 222px;background:var(--side);color:var(--side-text);display:flex;flex-direction:column;position:sticky;top:0;height:100vh}
.side .brand{padding:16px 18px 10px}
.brand a{color:#fff;font-weight:700;font-size:17px;display:flex;align-items:center;gap:9px}
.brand.big{font-size:22px;color:var(--text);display:flex;align-items:center;gap:10px;margin-bottom:4px}
.logo{display:inline-flex;align-items:center;justify-content:center;width:30px;height:30px;border-radius:7px;background:var(--brand);color:#fff;font-weight:800;font-size:13px;letter-spacing:.5px}
.side nav{display:flex;flex-direction:column;padding:4px 10px;flex:1;overflow:auto}
.side nav a{color:var(--side-text);padding:7px 10px;border-radius:6px;display:flex;align-items:center;gap:10px;font-size:13.5px}
.side nav a:hover{background:var(--side-active);text-decoration:none;color:#fff}
.side nav a.active{background:var(--side-active);color:#fff;font-weight:600}
.side nav .ic{width:18px;text-align:center;opacity:.8;font-size:14px}
.side-foot{padding:12px 18px 14px;border-top:1px solid #2a303b;font-size:12.5px;display:flex;flex-direction:column;gap:6px}
.side-foot .me{color:#fff;display:flex;flex-direction:column}.side-foot .me span{color:var(--side-text);font-weight:400;font-size:12px}
.side-foot .ver{color:#5d6675;font-size:11px}
.side-foot .imp{background:#3d2a00;border:1px solid #7a5300;color:#ffd58a;padding:8px;border-radius:6px;display:flex;flex-direction:column;gap:6px}
.menu-toggle{display:none}

/* main */
.main{flex:1;min-width:0;padding:22px 28px 40px;max-width:1240px}
body.wide .main{max-width:none}
.ph{display:flex;justify-content:space-between;align-items:flex-start;gap:16px;margin-bottom:16px;flex-wrap:wrap}
.ph .sub{color:var(--muted);font-size:13px}
.ph .actions{display:flex;gap:8px;flex-wrap:wrap;align-items:center}
.crumbs{font-size:12.5px;color:var(--muted);margin-bottom:6px}
.card{background:var(--card);border:1px solid var(--line);border-radius:var(--radius);padding:16px 18px;margin-bottom:16px}
.card.narrow{max-width:520px}
.card h2{display:flex;justify-content:space-between;align-items:center;gap:10px}
.grid{display:grid;gap:16px}
.grid.c2{grid-template-columns:1fr 1fr}.grid.c3{grid-template-columns:1fr 1fr 1fr}.grid.c4{grid-template-columns:repeat(4,1fr)}
.grid.main-side{grid-template-columns:minmax(0,2fr) minmax(280px,1fr)}
@media(max-width:1000px){.grid.c2,.grid.c3,.grid.c4,.grid.main-side{grid-template-columns:1fr 1fr}}
@media(max-width:640px){.grid.c2,.grid.c3,.grid.c4,.grid.main-side{grid-template-columns:1fr}}

.stats{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:12px;margin-bottom:16px}
.stat{background:var(--card);border:1px solid var(--line);border-radius:var(--radius);padding:12px 14px}
.stat .v{font-size:24px;font-weight:650;line-height:1.1}.stat .l{color:var(--muted);font-size:12px;margin-top:3px;text-transform:uppercase;letter-spacing:.3px}.stat .n{font-size:12px;color:var(--muted);margin-top:4px}

/* tables */
table{width:100%;border-collapse:collapse;font-size:13.5px}
th,td{padding:8px 10px;border-bottom:1px solid var(--line);text-align:left;vertical-align:top}
th{font-size:11.5px;text-transform:uppercase;letter-spacing:.4px;color:var(--muted);font-weight:600;background:#fafbfc}
tr:hover td{background:#fafbfd}
td.actions,th.actions{text-align:right;white-space:nowrap}
.table-wrap{overflow:auto}
.empty{color:var(--muted);padding:24px;text-align:center;border:1px dashed var(--line2);border-radius:6px}
.pager{display:flex;justify-content:space-between;align-items:center;margin-top:10px;font-size:13px}

/* badges */
.badge{display:inline-block;padding:1px 8px;border-radius:10px;font-size:11.5px;font-weight:600;line-height:18px;white-space:nowrap}
.badge.ok{background:var(--ok-bg);color:var(--ok)}.badge.bad{background:var(--bad-bg);color:var(--bad)}
.badge.warn{background:var(--warn-bg);color:var(--warn)}.badge.muted{background:#eef0f3;color:#535b66}
.badge.info{background:var(--info-bg);color:#1f5fbf}.badge.brand{background:#fbe6ea;color:var(--brand2)}
.badge.threat{background:#3b0f16;color:#ffd0d7}.badge.content{background:#fbe6ea;color:var(--brand2)}
.badge.productivity{background:var(--info-bg);color:#1f5fbf}.badge.bypass{background:var(--warn-bg);color:var(--warn)}.badge.vendor{background:#ece6fb;color:#5b3fb0}

/* flash */
.flash{padding:10px 14px;border-radius:6px;margin-bottom:14px;border:1px solid}
.flash.ok{background:var(--ok-bg);border-color:#bfe6cc;color:#125f31}
.flash.err{background:var(--bad-bg);border-color:#f3c1bd;color:#8d1c1c}
.flash.warn{background:var(--warn-bg);border-color:#f0d5a6;color:#7a4a00}

/* forms */
form.inline{display:inline}
label{display:block;margin-bottom:10px;font-weight:600;font-size:13px}
label>input,label>select,label>textarea{display:block;width:100%;margin-top:4px;font-weight:400}
input[type=text],input[type=email],input[type=password],input[type=number],input[type=search],input[type=date],input[type=datetime-local],select,textarea{
  font:inherit;padding:7px 9px;border:1px solid var(--line2);border-radius:6px;background:#fff;color:var(--text);max-width:100%}
input:focus,select:focus,textarea:focus{outline:2px solid #b8cdf0;border-color:#7ea3e0}
textarea{min-height:80px;resize:vertical}
.check{display:flex;align-items:flex-start;gap:8px;font-weight:400}
.check>input{display:inline-block;width:auto;margin:3px 0 0}
.row{display:flex;gap:10px;flex-wrap:wrap;align-items:flex-end}
.row>label{flex:1;min-width:140px;margin-bottom:0}
.row>label.grow2{flex:2}
.row>button,.row>.btn{margin-bottom:0}
.form-actions{margin-top:12px;display:flex;gap:8px;align-items:center}
.help{display:block;font-size:12px;color:var(--muted);font-weight:400;margin-top:3px}
fieldset{border:1px solid var(--line);border-radius:6px;padding:10px 14px;margin:0 0 12px}
legend{font-weight:600;font-size:13px;padding:0 6px}

.btn{display:inline-block;font:inherit;font-weight:600;font-size:13px;padding:7px 13px;border-radius:6px;border:1px solid var(--line2);background:#fff;color:var(--text);cursor:pointer;line-height:1.3;text-decoration:none}
.btn:hover{background:#f3f5f8;text-decoration:none}
.btn.primary{background:var(--brand);border-color:var(--brand);color:#fff}.btn.primary:hover{background:var(--brand2)}
.btn.danger{color:var(--bad);border-color:#efb9b5}.btn.danger:hover{background:var(--bad-bg)}
.btn.small{padding:3px 9px;font-size:12px}.btn.wide{width:100%}
.btn[disabled]{opacity:.5;cursor:default}

.seg{display:inline-flex;border:1px solid var(--line2);border-radius:6px;overflow:hidden}
.seg a{padding:5px 11px;font-size:12.5px;color:var(--text);border-right:1px solid var(--line2)}
.seg a:last-child{border-right:0}.seg a.on{background:var(--side);color:#fff}.seg a:hover{text-decoration:none;background:#eef0f3}.seg a.on:hover{background:var(--side)}

.copy{display:flex;align-items:center;gap:8px;background:#f0f2f5;border:1px solid var(--line);border-radius:6px;padding:6px 8px 6px 10px;margin:4px 0 8px}
.copy code{flex:1;word-break:break-all}

/* charts */
.chart{width:100%;height:auto;display:block}
.chart .grid{stroke:#e6e9ee;stroke-width:1}
.chart .axis{fill:var(--muted);font-size:10px}
.chart .bar-allow{fill:var(--allow)}.chart .bar-block{fill:var(--block)}
.spark polyline{fill:none;stroke:var(--allow);stroke-width:1.5}
.chart .line-threat{fill:none;stroke:#d81b60;stroke-width:1.8}.chart .dot-threat{fill:#d81b60}
.donut .legend .pct{color:var(--muted);min-width:34px;text-align:right}
.sU{stroke:#c9cfd6;background:#c9cfd6}.s8{stroke:#b26a00;background:#b26a00}.s9{stroke:#4a6fa5;background:#4a6fa5}
.donut{display:flex;gap:16px;align-items:center;flex-wrap:wrap}
.donut .legend{list-style:none;margin:0;padding:0;font-size:12.5px;flex:1;min-width:160px}
.donut .legend li{display:flex;align-items:center;gap:8px;padding:2px 0}.donut .legend b{margin-left:auto}
.sw{width:10px;height:10px;border-radius:2px;display:inline-block}
.donut-n{font-size:22px;font-weight:700;fill:var(--text)}.donut-l{font-size:10px;fill:var(--muted)}
.s0{stroke:var(--s0);background:var(--s0)}.s1{stroke:var(--s1);background:var(--s1)}.s2{stroke:var(--s2);background:var(--s2)}.s3{stroke:var(--s3);background:var(--s3)}
.s4{stroke:var(--s4);background:var(--s4)}.s5{stroke:var(--s5);background:var(--s5)}.s6{stroke:var(--s6);background:var(--s6)}.s7{stroke:var(--s7);background:var(--s7)}
.legend-inline{display:flex;gap:14px;font-size:12px;color:var(--muted);margin-top:4px}
.legend-inline .sw{margin-right:5px}

/* categories */
.cats{display:grid;grid-template-columns:repeat(auto-fill,minmax(230px,1fr));gap:4px 16px}
.cats label{font-weight:400;margin:0;padding:4px 0;display:flex;gap:8px;align-items:flex-start}
.cats label>input{display:inline-block;width:auto;margin:3px 0 0;flex:0 0 auto}.cats label>span{flex:1}
.cats .d{color:var(--muted);font-size:12px;display:block}
.cat-group{margin-bottom:14px}.cat-group h3{margin:6px 0;display:flex;align-items:center;gap:8px}

.kv{display:grid;grid-template-columns:max-content 1fr;gap:4px 16px;font-size:13.5px}
.kv dt{color:var(--muted)}.kv dd{margin:0}
.tabs{display:flex;gap:2px;border-bottom:1px solid var(--line);margin-bottom:14px;flex-wrap:wrap}
.tabs a{padding:8px 12px;color:var(--muted);border-bottom:2px solid transparent;margin-bottom:-1px;font-weight:600;font-size:13px}
.tabs a.on{color:var(--text);border-color:var(--brand)}.tabs a:hover{text-decoration:none;color:var(--text)}
.action-allow{color:var(--ok)}.action-block{color:var(--bad);font-weight:600}.action-rewrite{color:#5b3fb0}.action-refused{color:var(--warn)}.action-error{color:var(--muted)}
.dot{display:inline-block;width:8px;height:8px;border-radius:50%;margin-right:6px}
.dot.ok{background:var(--ok)}.dot.bad{background:var(--bad)}.dot.warn{background:#f2a900}
.login{display:flex;align-items:center;justify-content:center;min-height:80vh}
.login .card{width:400px;padding:28px}
.qr{display:block;margin:10px auto;border:1px solid var(--line);background:#fff}
details summary{cursor:pointer;font-weight:600}
.steps{padding-left:20px}.steps li{margin-bottom:8px}

@media(max-width:820px){
  body{flex-direction:column}
  .side{position:fixed;left:-240px;transition:left .2s;z-index:20;height:100vh}
  .side.open{left:0}
  .main{padding:16px}
  .menu-toggle{display:inline-block;font:inherit;font-size:20px;background:none;border:1px solid var(--line2);border-radius:6px;padding:2px 10px;margin-bottom:12px;cursor:pointer}
}
@media print{.side,.menu-toggle,.actions,.seg,.btn{display:none!important}.main{padding:0;max-width:none}.card{break-inside:avoid}}